Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: qDTfCoSOpsZW12S3nArfSFBnVdqYt+ICl4ojJYRj6nk=
Subject key identifier: FB:99:74:BC:E3:97:D9:5F:D2:C9:ED:9D:6D:65:62:D8:F4:DA:14:4E
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 01991876C8CC5A61A2AA0B5DC502199BC576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 07EE
Signing time: Fri 05 Sep 2025 06:01:01 +0000
Manifest this update: Fri 05 Sep 2025 06:01:01 +0000
Manifest next update: Sat 06 Sep 2025 06:01:01 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: t5zU8L6yBtmMUg7iNgopKwo3N1uO9GVDcIHd0ZfbBNM=)
2: pWMenEyK3oj7AZ6h81KI2eooBIo.roa (hash: 6KZd57Ad66QVQkNRU3497fAssJrDtYq8EPVr4qqDMKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:76:c8:cc:5a:61:a2:aa:0b:5d:c5:02:19:9b:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Sep 5 06:01:01 2025 GMT
Not After : Sep 6 06:01:01 2025 GMT
Subject: CN=fb9974bce397d95fd2c9ed9d6d6562d8f4da144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:aa:44:9e:4f:fd:05:4e:69:18:75:bb:1d:
68:eb:08:28:28:96:fa:6c:6b:9a:83:89:09:4f:f4:
e3:13:0c:67:52:04:ba:fb:7c:cc:88:4f:50:4e:c0:
b2:3f:d9:a4:17:f7:93:7b:26:3f:a3:fe:24:c0:34:
04:df:47:25:00:ac:c0:15:62:5a:f5:0c:d9:82:b3:
d6:0c:95:49:db:c4:cc:d7:ff:e3:35:d6:53:88:b4:
bf:01:bd:e8:ed:9e:cb:9d:87:d4:1b:5d:5d:76:b7:
0e:34:5e:c6:2e:a9:0a:aa:8a:dc:b2:25:2a:09:2d:
fe:6d:e5:8a:1e:33:d9:4f:d1:6d:85:bf:1d:7c:08:
21:1c:c6:84:39:65:37:2f:95:6f:74:80:f4:c4:a1:
b0:ea:2f:fb:f6:1f:52:41:7f:2f:45:39:d5:62:6f:
5c:dd:50:6e:06:3b:24:81:38:d1:1a:61:74:94:53:
02:70:c1:a6:32:ee:9d:3b:8c:90:fc:34:fd:0e:fc:
1f:42:50:15:70:68:3f:6e:c3:d4:b4:5a:18:f5:2c:
63:49:b5:21:01:8f:f2:90:6b:2e:3c:30:f1:c5:20:
7e:83:36:dd:e7:21:dc:00:8e:6b:0e:1c:ec:bb:d3:
88:0d:da:4f:eb:e1:be:9f:f2:37:3d:da:6b:b8:b2:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:74:BC:E3:97:D9:5F:D2:C9:ED:9D:6D:65:62:D8:F4:DA:14:4E
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:14:fd:c8:21:aa:1c:79:ca:62:97:3c:04:59:2e:e2:62:3a:
23:0e:67:04:7e:1f:64:53:db:bf:f1:a4:63:8d:ac:ff:0a:01:
bf:ab:64:af:11:30:73:a4:5a:50:e2:33:29:17:12:7c:74:22:
b1:20:be:ad:3b:6d:ee:54:d9:84:6c:e3:84:b0:d3:7c:52:5d:
db:9e:e6:fb:4f:6d:e1:ee:29:db:97:74:6e:80:d5:45:a7:a8:
f6:88:3f:19:28:de:b3:df:92:55:6f:51:e4:39:25:e9:55:58:
61:4a:b5:b5:eb:b3:82:5b:fd:ee:58:0f:8e:e9:8d:80:c8:9d:
3b:c9:e5:ee:9a:1b:0a:82:8a:81:ba:7d:02:a4:a9:28:00:21:
e1:0a:28:1f:3b:2f:b2:a2:a1:22:e4:a5:c0:4a:6a:68:fc:db:
cf:8a:00:db:49:8e:06:80:8d:47:03:c4:8a:c2:4a:25:b7:9a:
15:b4:55:51:77:66:19:7e:de:92:5b:ca:83:61:8d:ec:73:4e:
83:a2:a3:c7:21:49:15:94:16:0e:51:12:bc:d4:4a:8f:0b:d6:
03:a9:c4:d7:85:8c:0b:92:c9:7d:20:a6:e0:fe:7c:74:68:f2:
75:fa:d9:0a:40:aa:70:73:b8:7a:1e:bc:ff:8f:72:7d:35:25:
82:12:16:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:29:32 2025 by rpki-client